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Abstract 

We find equations for the higher dimensional analogue of the modular curve Xo(3) using Mum- 
ford's algebraic formalism of algebraic theta functions. As a consequence, we derive a method 
for the construction of genus 2 hyperelliptic curves over small degree number fields whose 
Jacobian has complex multiplication and good ordinary reduction at the prime 3. We prove 
the existence of a quasi-quadratic time algorithm for computing a canonical lift in charac- 
teristic 3 based on these equations, with a detailed description of our method in genus 1 and 2. 

Keywords: CM-methods, canonical lift, theta functions, modular equations. 

1 Introduction 

The theory of complex multiplication yields an efficient method to produce abelian varieties over 
a finite field with a prescribed endomorphism ring, fn the case of elliptic curves, one starts with O 
an order in an imaginary quadratic field of discriminant D. Let h — h(D) be the class number of 
O. ft is well known [26], Ch.II] that there exist exactly h isomorphism classes of elliptic curves with 
complex multiplication by O. Let ji be their j-invariants where i = 1, . . . h . The usual CM- method 
for elliptic curves consists of computing the ji using floating point arithmetic. One then recovers 
the HUbert class polynomial 



H D (X) = f[(X- 



Ji 



from its real approximation, using the fact that it has integer coefficients. It is usual to assess the 
complexity of this algorithm with respect to the size of the output. As h grows quasi-linearly with 
respect to D, the complexity parameter is D. 

In 2002, Couveignes and Henocq [5] introduced the idea of CM construction via p-adic lifting 
of elliptic curves. The basis of their idea is to construct a CM lift, i.e. a lift of a curve over a finite 
field to characteristic zero such that the Jacobian of the lifted curve has complex multiplication. In 
the ordinary case the lifting can be done in a canonical way. In fact, one lifts a geometric invariant 
of the curve using modular equations. The computation of the canonical lift of an ordinary elliptic 
curve has drawn a considerable amount of attention in the past few years following an idea of 
Satoh [24] [29] HU [3 [25j [14] . Mestre generalized Satoh's method to higher dimension using theta 
constants. His purely 2-adic method [T5l [22] is based on a generalization of Gauss' arithmetic 
geometric mean (AGM) formulas. In this article we present formulas which may be seen as a 3- 
adic analogue of Mestre's generalized AGM equations. In contrast to the latter ones, our equations 
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do not contain information about the action of a lift of relative Frobenius on the cohomology. In 
order to construct the canonical lift, we apply a modified version of the lifting algorithm of Lercier 
and Lubicz [12j to our equations. 

Next we compare our 3-adic CM method to the 2-adic CM method for genus 2 of Gaudry et 
al. [8], which uses the classical Richelot correspondence for canonical lifting. The latter method 
applies only to those CM fields K in which the prime 2 splits completely in the quadratic extension 
K/Kq, where Kq is the real subfield. For any other CM field K, the reduction of the CM curve at 
2 will be non-ordinary. Thus there exists no ordinary curve with CM by K to serve as input to the 
algorithm. The method presented in this paper exchanges this condition at 2 with the analogous 
condition at 3. Hence the resulting 3-adic CM method applies to a large class of CM fields which 
are not treatable by the prior 2-adic CM method [5]. 

Finally, we describe the techniques that are used in order to prove the equations introduced 
in the present paper. We prove our equations using the theory of algebraic theta functions which 
was developed by Mumford [17] . In the 3-adic arithmetic situation we make use of a canonical 
coordinate system on the canonical lift whose existence is proven in [2]. Our algorithm is proven 
by 3-adic analytic means and Serre-Tate theory. 

This article is structured as follows. In Section [2] we prove equations which are satisfied by 
the canonical theta null points of canonical lifts of ordinary abelian varieties over a perfect field 
of characteristic 3. In Section [31 for lack of a suitable reference, we prove some properties of 
algebraic theta functions which are used in the proof of the modular equations for the prime 3. 
In Section [4] we describe a method for CM construction via canonical lifting of abelian surfaces in 
characteristic 3. In Section [5] we recall classical results about the moduli of hyperelliptic genus 2 
curves and provide examples of the CM invariants of abelian surfaces and genus 2 curves. 

2 Modular equations of degree 3 and level 4 

In this section we prove equations which have as solutions the theta null points of the canonical 
lifts of ordinary abelian varieties over a perfect field of characteristic 3. The latter equations 
form an essential ingredient of the 3-adic CM construction which is given in Section [U Our proof 
uses Mumford's formalism of algebraic theta functions 17]. The results of Section 12.21 cannot 
be obtained in a complex analytic setting. We remark that in [10] Y. Kopeliovich proves higher 
dimensional theta identities of degree 3 using complex analytic methods. Our purely algebraic 
method yields similar equations. Our set of equations is 'complete' in the sense that it defines a 
higher dimensional analogue of the classical modular curve Xq(3). 

2.1 Theta null points of 3-adic canonical lifts 

For the basics about algebraic theta functions and standard notation we refer to [T7]. Let R be a 
complete noetherian local ring with perfect residue field k of characteristic 3. Assume that there 
exists a £ Aut(i?) lifting the 3-rd power Frobenius automorphism of k. Let A be an abelian scheme 
of relative dimension g over R, which is assumed to have ordinary reduction, and let C be an ample 
symmetric line bundle of degree 1 on A. We set Z n = (Z/nZ)^ for an integer n > 1. Assume that 
we are given a symmetric theta structure ©4 of type Z4 for the pair (A,C 4 ). Let (a u ) u£ z 4 denote 
the theta null point with respect to the theta structure ©4. In the following we identify Z 2 with 
its image in Z4 under the morphism which maps component- wise 1 1 — s- 2. We define 

S = {(x, y, z) G Z\ I (x - 2y, x + y - z,x + y + z) <G Z%}. 

For (xx,yi, Zi), (x2,V2, Z2) £ S we denote (x\,y\,zi) ~ (£2, V2, z 2 ) if there exists a permutation 
matrix P G M 3 (Z) such that 

(21 - 2yi,xi + y\ - z\,x\ + yi + z{) = (x 2 - 2y 2 , x 2 + y2 - z 2 ,x 2 + y 2 + z 2 )P. 
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Theorem 2.1 Assume that A is the canonical lift of A^. For (x, y±, z{), (x, y 2 , z 2 ) G S such that 
(x,yx,zi) ~ (x,y 2 ,z 2 ) one has 



^ , a y 1 +u a zi+u — ^ ] a y 2 +v a Z2+v- 
uGZ 2 vEZ 2 



Proof. There exists a unique theta structure 82 of type Z 2 for (A, C 2 ) which is 2-compatible with 
the given theta structure O4 (see [17j §2,Rem.l]). Now assume that we have chosen an isomorphism 

Z 3 ^ A[3] ct . (1) 

In order to do so we may have to extend locally-etale the base ring R. Note that a admits a unique 
continuation to local-etale extensions. Our assumption is justified by the following observation. 
As we shall see lateron, the resulting theta relations have coefficients in Z and hence are defined 
over the original ring R. 

By [2j Th.2.2] the isomorphism |T]) determines a canonical theta structure 9§ an of type Z% 
for C 3 . By Lemma T3.3I there exist semi-canonical product theta structures 0$ = 82 x 8^" and 
812 = 84 x 83™ of type Z 6 and Z%% for C 6 and £ 12 , respectively. By [H Th.5.1] and Lemma 
13.21 the canonical theta structure 8g an is symmetric. We conclude by Lemma 13.41 that the theta 
structures 82, 84, 86 and 812 are compatible in the sense of [3l §5.3]. For the following we assume 
that we have chosen rigidifications for the line bundles C 1 and theta invariant isomorphisms 

Hi : 7T*£* ^ V(Z,)=Hom(Z,,On), 

where i = 2, 4, 6, 12 and n : A — > Spec(i?) denotes the structure morphism. Our choice determines 
theta functions q& G V(Z{) which interpolate the coordinates of the theta null point with respect 
to <di (see [HI §1]). Let {8 w } w ^z 2 denote the Dirac basis of the module of finite theta functions 
V(Z 2 ). Let now (xo,Vi, Zi) S S where i = 1, 2 and set 

(tti, h, a) = (xo - 2yi,x +yi — Zi,x + y% + z%). 

Suppose that (xq, y%, Zi) ~ (xo, y 2 , z 2 ), i.e. there exists a permutation matrix P G M 3 (Z) such that 

(ai,6i,ci) = (a 2 ,b 2 ,c 2 )P. (2) 

For i = 1, 2 we set 

S xo = {{ X >V-> Z ) G s I ( x = x o) A (x - 2y, x + y - z,x + y + z) = (ai,bi,Ci)}. 

By Theorem 13.111 there exists a A G R* such that 

(S ai *Sbi *5 Ci )(x Q ) (3) 
= A ^2 S at (x-2y)Sb i (x + y-z)5 Ci (x + y + z)q / :x2(y)qc*{z) 

(x,y,z)&S^ 

= A ^ q c i2( yi +t)q C 4(z t + t). 
tez 2 

It follows by Theorem 12.41 and Lemma 13.51 that there exists an a G R* such that 

Qc 12 (z) = aq C 4(z) a (4) 

for all z G Z4. Combining the equations |3|) and {4| we conclude that there exists X £ R* such 
that 

(<5a, * (5b; * <5 C( ) (xo) = A ^2 1c 4 (Vi + t) a qc* {zi + i). (5) 
tez 2 
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The commutativity of the ^-product and equality @ imply that 

(S ai *8 bl *S cl )(x ) = (5 a2 *S b2 *6 C2 )(x ). (6) 
As a consequence of the equalities (|5|) and © we have 

X! ?£ 4 (2/1 + U ) CT( 7£ 4 ( z i + u ) = ^2 qc i (y2+v) a q C i(z 2 +v). 

uez 2 vez 2 



This completes the proof of Theorem 12.11 □ 

Note that by symmetry one has a u = a_ n for all u £ Z±. For the sake of completeness we also 
give the well-known higher dimensional modular equations of level 4 which generalize Riemann's 
relation. Let 

5" = {(v,w,x,y) £ Z\ | (v + w,v - w,x + y, x-y) £ Z 2 }. 

For (vi, wi, xi, ?/i ), («2, u>2, x 2 , y 2 ) € 5' we write {v\, toi, xi, 2/1) ~ (ua, W2, #2, 2/2) if there exists a 
permutation matrix P € MLi(Z) such that 

(«i + wi,vx - wx,xi + yi,xi - 2/1) = (v 2 + w 2 ,v 2 - w 2 ,x 2 + y 2 ,x 2 - y 2 )P. 



Theorem 2.2 For (v%, Wi, X\, yi), (v 2 ,w 2 ,x 2 ,y 2 ) £ S' such that (v%, W\, X\, y\) ~ (v 2 ,w 2 ,x 2 ,y 2 ), 
the following equality holds 

tez 2 sez 2 tez 2 sez 2 

A proof of the above theorem can be found in [171 §3]. 



2.1.1 Theta null values in dimensions 1 and 2 

In this section we make the equations of Theorem 12.11 and Theorem 12.21 explicit in the case of 
dimensions 1 and 2. Let F 9 be a finite field of characteristic 3 having q elements and let R — W(¥ q ) 
denote the Witt vectors with values in W q . There exists a canonical lift a £ Aut(i?) of the 3-rd 
power Frobenius of F ? . Let A be an abelian scheme over R with ample symmetric line bundle C 
of degree 1 on A. 

Dimension 1. Suppose that A is a proper smooth elliptic curve over R, and let (ao : ai : a 2 : 03) 
be the theta null point with respect to a symmetric theta structure of type (Z/4Z)# for (A,£ 4 ) 
where L — C(0a) and Oa denotes the zero section of A. By symmetry we have a\ — 03, and 
Theorem 12.21 implies that the projective point (ao : a\ : a 2 ) lies on the smooth genus 3 curve 
-Ai(@4) Q Proj(Z[i, xo, xi, X2]) = ^z[i] with defining equation 

(xq + xl)x x 2 = 2x\. (7) 

The latter classical equation is known as Riemann's relation. We remark that the points on A\ (64) 
give the moduli of elliptic curves with symmetric 4-theta structure. 

Now assume that A has ordinary reduction and that A is the canonical lift of A^ q . Theorem l2.ll 
implies that the coordinates of the projective point (ao : ai : a 2 ) satisfy the equation 

X02/2 + Z22/0 = 2xi2/i, (8) 
where Xi — <Zj and yi — a° for i = 0, 1, 2. 
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Dimension 2. Now suppose that A has relative dimension 2 over R and that we are given a 
symmetric theta structure of type (Z/4Z) 2 for the pair (A, £ 4 ). Let (&ij)(i.j)e(z/4Z) 2 denote the 
theta null point with respect to the latter theta structure. By symmetry we have 

ail = fl33j a 10 = a 30, a 01 = a 03, a 13 = a 31j a 32 = a 12, a 21 = a 23- 

The 2-dimensional analogue of Riemann's equation {8]) are the equations 

( x oo + x h + x w + ^X^ooa^ + 2:20^22) = 2(x 2 ll + 2: 2 . 1 ) 2 

(^00 + X 02 + x 20 + ^22)( a; 00a:20 + ^02^22) = 2(xj Q + x\ 2 ) 2 

(^00 + X 02 + x \a + x 2 2){ x ^ x 22 + 2:20^02) = 2(x 2 1 + x 2 3 ) 2 
(2:002:20 + £022:22) (^002:22 + 2:022:20) = ^ x m x li 
(2:002:02 + 2:20 2:22) (2:00 2:22 + 2:022:20) = 42; 2 2: 2 2 
(2:002:02 + 2:20 2:22) (#00 2:20 + 2:022:22) = ^ x \\ x \z 
(^oo + x 02 + 2-20 + 2:22)2:132:11 = (2; 12 + 2; 10 )(2:o 1 + x 21 ) 

(^00 + ^02 + ^20 + x 22) x m x 2\ = ( x 12 + ^loX^ll + X 13) 

(x 00 + x Q2 + 2; 20 + 2:22)2:102:12 = (2; 01 + 2; 21 )(2; 11 + 2; 13 ) 
(2:022:20 + 2; o2;22)2:ii2;i3 = 22; i2;io2:2i2;i2 
(2:202:00 + 2:222:02)2:102:12 = 22:112:132:212:01 
(2:002:02 +2:202:22)2:212:01 = 2xnxi 3 x w xi 2 
(2:022:20 + 2:002:22 ){x 2 ll + ^21) = 22:102:12 (^ii + 2: 2 3 ) 
(2:002:02 + 2:202:22 ){xl 1 + xl 3 ) = 2x w xi 2 {xl 1 + x\ x ) 
(2:022:20 + 2:002:22 )(2: 2 o + x\ 2 ) = 2x 21 x m {x 2 ll + x\ 5 ) 
(2:202:00 + 2:222:02) (2; 2 3 + x^) = 2x 21 x m {x 2 w + x\ 2 ) 
(2:202:00 + 2:222:02) (2:21 + £01) = 22:112:13 (2; 2 + x\ 2 ) 
(2:002:02 + 2:202:22) {x\ 2 + x 2 w ) = 22:112:13(2:^ + x^ x ) 
2:012:21(2:^ + 2;^) = 2:i 2;i2(2; 2 + x\ 2 ) 
2:012:21 (2:^ + x\ x ) = 2:n2;i3(2: 2 1 + x\ z ). 

By Theorem l2.2l the point ( a y )(ij)e(z/4Z) 2 is a solution of the equations ©, i.e. the above equations 
hold for Xij = ciij. The latter equations determine a three dimensional subscheme A 2 {Qti) of the 
projective space 

P Z[|] = Plo i(H^ x 00, %oi, x 2, xio, xn, X12, x 13 , X20, x 2 i, x 22 }). 

The points on ^2(64) give the moduli of abelian surfaces with symmetric theta structure of type 
(Z/4Z) 2 . We remark that the point 

(a 00 : a 01 : a Q2 : a 10 : an : a 12 : ai 3 : a 20 : a 2 i : a 22 ) € P^i^R) 

is a solution of the equations (J9j) if and only if the projective coordinates 

(«oo + ah + a 2 20 + <4 2 ■ 2(ooi + 4i) ■ 2(a? 2 + a 2 ) : 2{a 2 11 + a 2 3 )), 
(ap! + a 2 ! : aooao2 + a 20 a 22 : 2anai 3 : 2aioai2), 
(a 2 2 + a 2 : 2anai 3 : 000^20 + «02 a 22 : 2aoia2i), 
(a 2 x + a 2 3 : 2aioai2 : 2aoia2i : 000^22 + 002^20) 

describe the same point in PL A1 (i?). In fact the above formulas dehne a morphism to the space 
of abelian surfaces with 2-theta structure which embeds in PLi,. Together with the Riemann 
equations, the following corollary of Theorem 12.11 forms the basis of our construction algorithm 
for CM abelian surfaces. 

Corollary 2.3 Assume that A has ordinary reduction and that A is the canonical lift of A^ q . Let 
(ay) denote the theta null point of A with respect to a given symmetric A-theta structure. Then 
the coordinates of the point 

(a 00 : a i : a 02 : a w : an : a i2 : a i3 : a 20 : a 2 i : a 22 ) € P^i^i?) 
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satisfy the following relations 



£002/02 + zo22/oo + £202/22 + £222/20 - 2(x i2/oi + £212/21) = 
£002/20 + £202/00 + £022/22 + £222/02 - 2(xio2/io + £122/12) = 
£002/22 + £222/00 + £022/20 + £202/02 - 2(xi 3 yi3 + £112/11) = 
£012/21 + £212/01 - (£122/10 + £102/12) = 
£oi2/2i + £212/01 - (£112/13 + £i32/n) = 0, 



(10) 



wh 



2/y 



2.2 Galois properties of the canonical theta structure 

For our notation and standard definitions we refer to j!7| and [5] ■ Let R be a complete noetherian 
local ring with perfect residue field k of characteristic p > 2. Suppose that we are given an abelian 
scheme A over R which has ordinary reduction. Let C be an ample symmetric line bundle of degree 
1 on A. We set q = p d where d > 1 is an integer. Assume that there exists a a € Aut(i?) lifting the 
q-th power Frobenius automorphism of k. Recall that there exists a canonical lift F : A — > A^ q > of 
the relative g-Frobenius morphism and a canonical ample symmetric line bundle of degree 1 
on A® such that F*£^ = C (see [2 §5]). Let A^ be defined by the Cartesian diagram 

AW *■ A (11) 



Spec (.R)^!^ Spec (i?), 

where the right hand vertical arrow is the structure morphism. Let be the pull back of C 
along the morphism pr : A^ — > v4 which is defined by the diagram 1)1 lj) . 

Now let n > 1 be a natural number such that (n,p) = 1, i.e. the numbers n and p are coprime. 
Assume that we are given a symmetric theta structure O n of type Z n = (Z/nZ)^ for C n where 

g = dhnn(A). We denote by £„ the n-th power of . We obtain a theta structure 0^ for 
on by extension of scalars along Spec(cr) applied to the theta structure 9„ : G(Z n ) G{L n ) 
and by chaining with the natural isomorphism Z n — > Z n ^ a and the inverse of its dual. Assume 
that A is the canonical lift of Ak- Our assumption implies that the abelian schemes A^ and A^ 
are canonical lifts which are canonically isomorphic over the residue field k. In the following we 
will assume that the special fibers of A^ and A^ are indeed equal. There exists a canonical 
isomorphism r : A^ A^ over R lifting the identity on special fibers. 

We claim that t*C^ = £(«>. We set M = r*£<» <g> (£C«))-i. It follows by the definition of 
that the class of M. reduces to the trivial class. Note that t*C^ is symmetric. By [2j Th.5.1] 
also the line bundle is symmetric. As a consequence the line bundle A4 is symmetric and 
gives an element of Pic^,) , R [2](R). We observe that the group Pic^ (9) i R [2] is finite etale because 
of the assumption p > 2. We conclude by the connectedness of the ring R that the class of M. is 
the trivial class. Hence our claim follows. 

By the above discussion there exists an isomorphism 7 : t*jC^"' D- q K We define a G mi R- 
invariant morphism of theta groups r* : G(C^) — > G(C^) by setting [x, <p) 1— > (y, T*~fOT*ipo~f~ 1 ^ 

where y — t~ 1 (x) and ip : £^ <J - ) —> T x jC^"'. Obviously, our definition is independent of the choice 
of 7. For trivial reasons the morphism t* gives an isomorphism. 

Theorem 2.4 There exists a canonical theta structure O^ of type Z n for depending on Q n 
such that 

T*oQi-) =0(?). (12) 
Proof. Assume that we have chosen an isomorphism 

Z q = (Z/gZ)» ^ A[qr\ (13) 



G 



where ^4[g] et denotes the maximal etale quotient of A[q]. In order to do so we may have to extend 
R locally-etale. By [3J Th.2.2] there exists a canonical theta structure <d q an of type Z q for the 
pair [A, C q ) depending on the isomorphism (fl3|) . We remark that the canonical theta structure is 
symmetric by 2, Th.5.1] and Lemma 13.21 By Lemma 13.31 there exists a semi-canonical symmetric 
product theta structure Q nq — Q n x Q q an of type Z nq = (Z/nqZ) 9 R for the pair (A,£ nq ) where 
C nq = £®' nq . It follows from [3, Prop. 5. 3] that the theta structure Q nq descends along the Frobenius 
lift F to a canonical theta structure for We choose 9i 9 ' = ng (id) where our notation 
is as in [SJ §5.2]. In the following we will prove that 0^ has the desired pull back property (|T2|) . 

First we check the pull back property for the induced Lagrangian structures. Let <5„, 8n and 
5 n a ^ be the Lagrangian structures which are induced by 0„, offl and Q^n \ respectively. We claim 
that 

6P=to5®. (14) 

As Qn — ©ng(id) (notation as in 3, §5.2]) the restriction of the Lagrangian structure S n to 
Z„ equals the restriction of F o 5 n . As a consequence the restrictions of the morphisms t o 5$ 
and 6^ coincide on the special fiber. By general theory the reduction functor on the category of 
finite etale schemes over R gives an equivalence of categories. We conclude that the equality (fLf| 
restricted to Z n is true over R. The equality for Z% can be proven analogously. Note that Z® is 
etale because of the assumption (n,p) = 1. Hence the claim follows. 

It remains to show, on top of Lagrangian structures, the equality of theta structures as claimed 
in (fl"2")) . By [3J Prop. 4. 5] the theta structures n , 0^ and 0^ give rise to sections s, and 
s( q ' of theta exact sequences 



■ G 



■m , R ' 



id 



(15) 








"m.R 



0. 



We claim that the diagram (fT5|) commutes. By definition, the squares of the above diagram com- 
mute. By equation (|14|) the right hand triangle commutes. It remains to show that 



T O S 



(°0 



(16) 



The difference of r* o and gives a point <p g Kom.n(Z n , G m R) = l^n,R(R)- It suffices to 
show that the point <p reduces to the neutral element of fJ> n ,k, because the group // n ,i? is etale 
and the ring R is connected. In the following we prove that ip has trivial reduction. Consider the 
diagram 



G(A0 ■ 
e„ 
G(Z n ) ■ 



G(C nq ) 
■ G(Z nq ) 



^G(c nq y 



rn , R 



X Zr, X Z, 



D 
nq 



G{C nq )*/K- 



tR x Z n x (ZE./K) 



G{CW) 



• G(Z n ) 



where E q and e q are defined as in [3J §5.3], K = Ker(F) and K is a canonical lift of K to the 
theta group G(C nq ). The group G(£ nq )* is defined as the centralizer of K in G(C nq ). By Lemma 
the left hand square of the above diagram is commutative. The lift K is induced by some 



isomorphism a : F* L^P — > C nq . Let x 6 Z n , y = S n (x,l) and z = S n q \x,l). Suppose that 
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s(x) = & n {l,x, 1) = (y,ip y ) and s^(x) = 0^(1, x, 1) = 0,7*). Note that z = F(y). It follows by 
the commutativity of the above diagram that 

^ = T; fl of- 7j o Q - 1 , (17) 

Equation (JT7J) says in down-to-earth terms that, on the special fiber, the isomorphism 7 Z is the 
pull back of ijj y under the isomorphism pr : A^ 7 ' — * A where the latter is defined by the diagram 
(fTTj) . This proves that the above character ip is trivial on the special fibre. This proves the equality 
(JTHJ) and hence the diagram (|15p is commutative. The proof for is analogous. 

We remark that the equality (JT2J implies by means of descent that 0$ is defined over R. This 
completes the proof of the theorem. □ 



3 On the theory of algebraic theta functions 

In this section we prove some basic facts about algebraic theta functions which are needed in the 
proof of Theorcm l2.ll These results are absent from the literature. For an introduction to algebraic 
theta functions we refer to [T7] . 

3.1 Symmetric theta structures 

In this section we recall the notion of a symmetric theta structure. The symmetry turns out to be an 
essential ingredient in the proof of the theta relations of Theorem 12.11 We give a characterization 
of the symmetry of a theta structure in terms of the symmetry of the associated line bundles. This 
characterization is not obvious from the definitions given in [171 §2]. The results of this section 
imply that the canonical theta structure, whose existence is proven in [2], is a symmetric theta 
structure. Note that our definition of symmetry is weaker than the one given in [171 §2]. 

Let A be an abelian scheme over a ring R and let £ be a line bundle on A. Consider the 
morphism 

V c : A^Vic% Rl x^^C^C- 1 ) 

where (•) denotes the class in Pic° A / R . We denote the kernel of ipc by A[C]. The line bundle £ is 
called symmetric if [— 1]*£ = £. 

Now assume that we are given an isomorphism ip : £ — > [— 1]*£. We denote the theta group of 
the line bundle £ by G{C). Let (x, (p) £ G(C), where x S A[C] and ip : £ — > T*C is an isomorphism, 
and let t v denote the composed isomorphism 

£ i [-1]*C [ ~-^ [-1]*T X *£ = T1 X [-1]*C T ^ 1 T*_ X C. 

One defines a morphism <5_i : G(£) — ► G(£) by setting S-i(x, ip) = (—x,t v ). We remark that 
the definition of t v does not depend on the choice of the isomorphism ip. Obviously S-± is an 
automorphism of order 2 of the group G(£). 

Let K be a finite constant group over R. We define an automorphism £)_i of the standard 
theta group G(K) = G m ,R x K x K D by mapping (ct,x,l) h- > (a, — a;,^ -1 ). Assume now that we 
are given a theta structure O : G(K) ^> G{£). 

Definition 3.1 The theta structure O is called symmetric if the following equality holds 

eoD_i =Lio9. (18) 

Note that we do not assume that the line bundle C is totally symmetric as it is done in [17l 
§2]. In the following we will give a necessary and sufficient condition for a theta structure to be 
symmetric. Recall (see §4]) that the theta structure 6 corresponds to a Lagrangian structure 
of type K and isomorphisms 

clk '■ Ik-M-k — * £ and ct K o : 1* kd M.k d ~ * A 
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where Ik ■ A — > Ak and I K n : A — > are isogenies with kernel K and if , and A4k and 

A^x 15 are line bundles on Ak and A k d, respectively. 

Lemma 3.2 TVie theta structure is symmetric if and only if the line bundles Mk o-nd M. K D 
are symmetric. 

Proof. We prove that the equality (|T5|) holds on the image of the morphism 

sk ■ K — > G{K),x^ (l,a:,l) 

if and only if the line bundle Mk is symmetric. An analogous proof exists for the dual construction. 
Consider the following diagram 



3 




e 




sk „, 





K 



Here the morphism j denotes the inclusion induced by the Lagrangian structure, which is part of 
the theta structure 9. By [2, Prop. 4. 2 and Prop.4.5] we have 0(1, a:, 1) = (j(x),T*^ctK ° a K '). 
We conclude that 

S-! (6(1, ar.l)) = (H{x),Tl j{x) ^- l o[-l]\T* {x) a K 00^)0^ 

where ip : L — > [— 1]*C is an isomorphism as above. On the other hand one has 

e(Z>_x(l, x, !)) = {- j(x),Tl j{x) a K o % '). 
Hence the equation (fT8|) restricted to elements of the form (l,x, 1) translates as 

T* j(x) V> -1 o [-l]*(T* {x) a K o a^ 1 ) o ip = T*_ j[x) a K o a K \ 
The latter equality is equivalent to 

[-l]*^^ 1 o ip o uk — ^-(^([-ll'a^ 1 oij)o cxk). 
The latter equality means that the composed isomorphism 



I K M K a -$£^ 



-1]*C 1 ^ [-1]*I* K M K = I* K [-1]*M K 



is invariant under T*^^ for all x € K. This is true if and only if this isomorphism equals the pull 
back of an isomorphism M.k [— ^\*M-k along Ik- Thus the lemma is proven. □ 

3.2 Product theta structures 

The construction of product theta structures is considered as known to the experts. But the reader 
should be aware of the fact that a product theta structure of given theta structures does not 
always exist. In this section we clarify the situation by proving the existence of a product theta 
structure under a reasonable coprimality assumption. We provide detailed proofs because of the 
lack of a suitable reference. 

Let A be an abelian scheme of relative dimension g over a ring R and let C be an ample 
symmetric line bundle of degree 1 on A. For an integer n > 1 we set Z n = (%/nL) 9 R . Now let 
n, m > 1 be integers such that (n, m) = 1, i.e. the numbers n and m are coprime. Assume we are 
given theta structures 

0„ : G(Z n ) ^ G(C n ) and 6 m : G(Z m ) ^ G(C m ). 

We consider Z n and Z m as subgroups of Z nm via the morphisms that map component-wise 1 1— * m 
and 1 1— * n, respectively. 
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Lemma 3.3 There exists a natural product theta structure 

©nm : G(Z nm ) — ► G(C nm ) 

depending on the theta structures 0„ and TO . 

Proof. Let e n , e m , E n , E m , r) n , r] m , H n and H m be denned as in [31 §5.3]. We claim that for all 
g € G(C n ) and h e G{C m ) we have 

f-n(h)e m (g) = e m (g)e n (h), (19) 

where the product is taken in G(C nm ). Let S n and 5 m denote the Lagrangian structures that are 
induced by 0„ and Q m . We set 5 nm — 6 n x S m . Condition (| 1 0[) is equivalent to 

where the elements S nm (x g ,l g ) and S nm (xh,lh) are the images of e m (g) and e n (h), respectively, 
under the natural projection G{C nm ) — > H(C nm ). The vanishing of the commutator pairing follows 
from the bilinearity and the assumption (n, m) = 1. This proves the above claim. As a consequence 
there exists a canonical morphism of groups 

e : G(C n ) x G(£ m ) -» G(£" m ) given by (g, h) ^ e m (g)e n (h). 

Because of our assumption (n,m) — 1 the subgroup C = ker(e) is contained in the subtorus 
dm,s x G mi s of G(C n ) x G(C m ). In the following we will prove that e is surjective. Consider the 
diagram 

G(C n ) x G(C m ) *~ G(C mn ) 



H(C n ) x H(C m ) — — ^H(C nm ) 

where ir and 7r„ x n m denote the natural projections. Let s be the section of ir n x 7r m induced by 
the theta structures O n and m . We have tt o e = 7r„ x 7r m (up to canonical isomorphism). As 
a consequence we have 7r o e o s = (7r„ x 7r m ) o s = id. We conclude that 7roeoso7r = 7r. Let 
g G G(C nm ). Then by the latter equality the group element e(s(n(g))) differs from g by a unit. 
Hence the morphism e maps a suitable multiple of s(jr(g)) to g. This implies the surjectivity of e. 
As a consequence e induces an isomorphism 

e : (G(C n ) x G(£ m )) /C -> G(£ nm ) 

By the same reasoning as above one can define a natural morphism E 1 : G(Z n ) x G(Z m ) — » G(Z nm ), 
and it is readily verified that the induced morphism E 1 : (G{Z n ) x G(Z m )) /C — > G(Z nm ) is an 
isomorphism of groups. Let nm denote the composed isomorphism 

G(Z„ m ) ^ (G(Z„) x G{Z m ))/C e "-^S m (G(£") x G(£ m ))/G A G(£" m ). 
The morphism rlTO establishes the theta structure whose existence is claimed in the lemma. □ 
Now let Qnm be as in Lemma l3.3l and define the m-compatibility of theta structures as in [3j §5.3]. 



Lemma 3.4 Assume that Q n is symmetric. Then 0„ m is m- compatible with 0„. 

Proof. Let e„, e m , E n , E m , T) n , rj m , H n and H m be defined as in [3j §5.3]. Note that by the defini- 
tion of Q nrn there is an equality Q n m°E m = e m o9„. It remains to check that r\ m o nm = & n oH m . 
In other words, we have to prove that 

0« ° H m ° E m = rj m o e rn o 0„ and 0„ o H m o E n = r] m o e„ o m . (20) 
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Using the definition we compute H m (E n (a,x,l)) = (a nm ,0, 1). As (n, m) = 1, it follows that the 
image of r\ m o e n is contained in G m ,R. Hence the right hand equation in (|20p is a consequence of 
the G m .#-equi variance of 0„ and O m . It remains to prove the left hand equation. We have 

Vm ° e m = S m and H m oE m = D m (21) 

where D m denotes the map G(Z n ) -> G(Z n ), (a,x,l) h-> , to, l m ) and <5 m : G(£") -> G(£") 
is given by 

g H-> g (™ 2 +™)/2 . ( 5_ 1 ( 5 )(" l2 - J ")/ 2 . 

Here 5—i is defined as in Section 13.11 The right hand equation in (|2ip follows by expanding 
the definitions. The left hand equation in (|2ip is proven in [TTJ §2, Prop. 5]. A straight forward 
calculation yields that for all g £ G{Z n ) one has 

D m (g) = . 9 (™ 2+m )/ 2 • D- 1 ( g )( m *- m V*. (22) 

The left hand equality in ([20]) is implied by the equalities (|2T|) and ([22]) using the assumption that 
0„ is symmetric, i.e. equation (fTg)) holds. This completes the proof of the lemma. □ 



3.3 Descent of theta structures by isogeny 

In this section we prove some lemma which forms an important ingredient of the proof of Theorem 
12.11 The lemma is about special theta relations which are induced by descent along isogenies. A 
proof of this key lemma in terms of algebraic theta functions is absent from the literature. In the 
following we use the notion of compatibility as defined in [3j §5.2-5.3]. 

Let R be a local ring, and let tta : A —> Spec(i?) and ttb ■ B — > Spcc(i?) be abelian schemes 
of relative dimension g. We set Z n = (Jj/n1) 9 R for an integer n > 1. As usual, we consider 
Z n as embedded in Z mn via the morphism that maps component-wise 1 k n. Let M. be an 
ample symmetric line bundle on B. Suppose that we are given 2-compatible theta structures 
Sj : G(Zj m ) — > G(A / P) for some m > 1, where j £ {1,2}. Let F : A — > B be an isogeny of degree 
d 9 . Assume that there exists an ample symmetric line bundle C on A such that F*A4 = C. Now 
assume that we are given 2-compatible theta structures Qj : G(Zj m d) ^ G^) such that Qj and 
Ej are _F-compatible. By general theory there exist theta group equivariant isomorphisms 

fXj : %a,*& V(Z jmd ) and ~fj : nB,*M j ^ V(Z jm ). 

Suppose that we have chosen rigidifications of £ and M.. This defines, by means of /ij and jj, 
theta functions q M j £ V(Zj m ) and q^i £ V(Zj m a) (see [TTl §1] p2 §5.1]). Here we denote the 
module of algebraic theta functions by V(Z n ) = Hom(Z„, Or) for an integer n > 1. The following 
lemma generalizes [31 Lem.6.4]. 

Lemma 3.5 There exists a A £ R* such that for all x £ Z2 m one has 

q M 2 (x) = Mc 2 (x)- 

Proof. By Mumford's 2 -Multiplication Formula p~7l §3] there exists a A £ R* such that for all 
z £ Z m and x £ Zi m we have 

(l*6 z )(x) = A ^2 5 z (x - y)q M 2 (y) = Mm 2 (x - z). 

y£x+Z m 

Here 1 denotes the finite theta function which takes the value 1 on all of Z m . The Isogeny Theorem 
p~7l §l,Th.4] implies that there exists a A £ R* such that for x £ Z-idm we have 

\q M ^(x - z), x £ Z 2m 
, else 



F*{l*S z ){x) = 
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Also there exists a Ai, A2 G R* such that for x G Z m d we have 

= { ^ ^lsf" and F*(<5 Z ) = A 2 <5 Z . 

Again by Mumford's multiplication formula there exists a A G R* such that for all x G 2 2m d we 
have 

(F*{l)*F*(5 x ))(x) =A ^ F*(l)(a: + »)<y a (a;-y)g jC2 -(y) 

_ f ^<?£ 2 - z), a; G Z 2m 
[ , else 

The Lemma now follows from the observation that *F*(5 Z ) and F*(1*<J Z ) differ by a unit. 

□ 



3.4 Products of abelian varieties with theta structure 

In this section we prove the existence of finite products abelian varieties with theta structures. 
This kind of product is needed in the proof of the 3-multiplication formula. 

Let Ai, . . . , A n be abelian schemes over a ring R. Assume we are given a line bundle Ci on Ai 
and a theta structure 0» of type for (A, d) for alH = 1, . . . , n. We set 

n n n 

A = ]jA l , K = ]jK l and C = (g)p*£i 

i—1 i—1 i—1 

where pi : A — > Ai denotes the projection on the i-th factor. 

Lemma 3.6 There exists a natural product theta structure of type K for (A, C) depending on the 
theta structures @i, where i = 1, . . . n. 

Proof. We remark that there exists a canonical isomorphism H(Ci) ^> H{£). Consider the 
morphism ip : f]™ =1 G(A) — > G(C) given by (xi,ipi) ^ ((xi)i=i... n , ®"=iP*^>i) ■ Note that 

n n 

&)Pi T Xi£i = ® T (x 1 ,...,x n )Pi£i = T (x u ...,x n )£- 
i=l i=l 

Obviously, C = kcr(<p) C We claim that <p is surjective. Consider the diagram 

nlliG(A) V - >G(C) , 

TTl X...X7r„ 

nr =1 H(ri)— = — 

where 7Tj (i = 1, . . . ,n) and 7r denote the natural projections. Let s be the canonical section of 
7Ti x . . . x 7r„ induced by the theta structures 0j. We have n o ip = m x . . . x 7r„ (up to canonical 
isomorphism). As a consequence we have jro^os = (771 x . . . x ir n ) o s = id. We conclude that 
7ro^oso7r = 7r. Let 5 G G(C). Then by the latter equality the group element y>(s(7r (<?))) differs 
from 5 by a unit. Hence the morphism ip maps a suitable multiple of s(Tr(g)) to 5. This implies 
the surjectivity of ip and proves our claim. 

Analogously, one defines a surjective morphism $ : n"=i G{Ki) — ► G(i4T) having kernel equal 
to G. Let 99 and $ denote the induced isomorphisms 

^(AjJ/C^GM and (jlGiK^ /C ^ G(K). 
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The theta structure O whose existence is claimed in the lemma is given by the composed isomor- 
phism 

G(K) ^ {^G(Ki)\ /C eiX ^ xe " ffl G (^)J 1° G ( £ )- 
This completes the proof of the lemma. □ 



3.5 An algebraic proof of the 3-multiplication formula 

In the following we give a ^-multiplication formula for algebraic theta functions in the context of 
Mumford's theory [17]. Our method of proof extends to an arbitrary n-product of algebraic theta 
functions. For this reason it seems to be instructive to give a detailed proof in terms of Mumford's 
algebraic theta functions. The following proof generalizes in a straight forward manner Mumford's 
proof of his ^-multiplication formula [T71 §3]. The classical complex analytic 3-multiplication for- 
mula does not apply in our case because we are working in an arithmetic setting. The theory of 
algebraic theta functions allows us to keep track of the reduction modulo the prime 3. Let us re- 
mind the reader, that our aim is to use the 3-multiplication formula in order to lift theta null points 
from the special fiber to characteristic 0. For the proof of the complex analytic 3-multiplication 
formula we refer to [TJ Ch.7.6]. 

Let A be an abelian scheme over a local ring R and let £ denote the isogeny A 3 — > A 3 given by 

{x 1 ,x 2 ,x 3 ) i-> (xi - 2x 2 ,xi + x 2 - %z,Xi + x 2 + x 3 ) 

Assume we are given an ample line bundle £ on A and theta structures 8^ of type Ki for D where 
i £ / = {1,2,3, 6}. We assume that the theta structures Oi, % £ I, are compatible in the sense of 
P2 §5.3]. We set 

Mi,j,i =p$£ i ®p* 2 C j ®pt£ l , 

where p r : A 3 — > A, r — 1, 2, 3, is the projection on the r-th factor, and Kiji = Ki x Kj x Ki for 
i,j,l £ I. By Lemma [3761 there exist product theta structures Oi,i,i and 63,6,2 of type -Ki.i.i and 
^3,6,2 for Ali i t i and A^3.6,2, respectively, depending on the theta structures Oj where i £ I. 

Proposition 3.7 There exists an isomorphism 

r>1|.:., A'l.i ,;.2. (23) 
Proof. Let b = (61, b 2 ) £ A 2 and a £ A. We define 

si : A 2 —> A 3 , (xi, x 2 ) i-> (a, xi, Xi) and s 2 : A — > A 3 , x i-> (x, 61, b 2 ). 
One computes 

s* 2 Mz fi ,2 = s* 2 p\C 3 ® s* 2 p* 2 C 6 <g> s* 2 p* 3 C 2 = (pi o s 2 )*C 3 ® (pa o s 2 )*C 6 ® (p 3 o s 2 )*£ 2 = £ 3 . 
and 

s2^*Ati,i,i = {pi o 6° s 2 )*£ ® (p 2 o £ o s 2 )*£«) (p 3 o £ o s 2 )*£ 
= r: 2fci £ ® T b * _ &2 £ ® T* +fc2 £ = £ 3 . 

The latter equality follows by the Theorem of the Square. Now take a — Qa where Qa denotes 
the zero section of A. Let p 23 : A 3 — > A 2 be the projection on the 2-nd and 3-rd factor and let 
p m : A 2 — ► A denote the projection on the m-th factor (to = 1,2). We have 

8*M 3 ,»,n = {pi o Sl )* £ 3 ® sl{p* 2 £ e ® pl£ 2 ) 

= ( Pl o Sl )*C 3 ®(p 23 o Sl )*(p* 1 C e <E>p* 2 C 2 )=p* 1 £ 6 (S>p* 2 C 2 . 
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By [T71 §3, Prop. 1] we conclude that 

sU*Mi,i,i = 0io^o Sl )*£(g)(p23oC°Si)*(pJ£(g)^£) 

= pi [2]*[-l]*£ ® (pl£ (8 p* 2 Cf = plC 6 <g> ^£ 2 . 

The latter equality follows by the symmetry of £. Note that P23 o^osi equals the isogeny used in 
[17\ §3,Prop.l]. The proposition now follows by applying the Seesaw Principle. □ 

Lemma 3.8 The theta structure 63,6,2 is compatible with 61,1,1. 

Proof. We have to check the compatibility assumptions of [21 §5.2]. We have already shown in 
Proposition 13 . 71 that there exists an isomorphism a : £*A4 1,1.1 — * A^3,6.2 ■ Let r be the morphism 
A — > A 3 , x 1— ► (2x, x, 3a;). The kernel of £ is given by the restriction of r to A[6). In the following 
we will identify the groups Kq x , #1,1,1 x K xl x and #3,6.2 x #3°6 2 with their images under 
the Lagrangian decompositions induced by the theta structures 06, ©1,1,1 and ©3,6,2, respectively. 
Note that A[6] is contained in the image of Kq x K$ under r. By the compatibility assumptions we 
have t(Kq) C #3,6,2 and t(K®) C K® 6 2 . We conclude that condition (f ) of [21 §5.2] is satisfied 
with Z\ = t(A[6] n KqJ and Z 2 = t(A[6] (1 Kg). The isomorphism ([23)) gives rise to a subgroup 
# < G(A^3,6.2) lifting the kernel of £. Let G(A43,6,2)* denote the centralizer of K in G(A^3,6,2)- 
By [LZl §l,Prop.2] we have 

G(.M 3 ,6,2)* = {9 G G(X 3 ,6,2)|e(^3,6,2(g)) G 4 3 [Mi,u]} (24) 

where ^3,6,2 : G(A^3,6,2) — ► -<4 3 [^3,6,2] is the natural projection. Here we denote 

A 3 [M id ,i] {x< A 3 |T*Mij,i Mij,i} 

for all i, j, / G I. Because of the equality ([24]) we have 

Z^ = {(x,y,z) G # 3 ,6,2|£(a:, V, z) G #1,1,1} and Z 2 X = {(x,y,z) G # 3 D 6 ,2|£(a:,y, 2) G #£1,1} 

(notation as in [21 §5.2]). Obviously the isogeny £ induces a surjective morphism a : Z-j 1 — > #1,1,1 
having kernel Z\. Let o~\ be the inverse of the isomorphism Z x jZ\ #1,1,1 induced by <r. Let (T2 
be defined as in pH §5.2]. It remains to check the commutativity of the following diagram 

G(M 3 ,6, 2 )7# " Gm,fl x Z^/Zi x Z^/Zs (25) 



can,£ 



id x (7i x (j 2 



G(Mi,i,i) G m ,i? x ^1,1,1 x Kg 1A 

where the left hand vertical morphism is defined as in the proof of [17l §1, Prop. 2]. We claim that 
the group G m ,R x Z x jZ\ x Z 2 /Z% is generated by G m ,R and elements of the form 

(l,2x,x,3x,Z 2 ,Z,Z 3 ), (l,2x,x,-3x,Z 2 ,Z,Z -3 ) and (1, 2x, -2x, 0, Z 2 , P 2 , 1) 

where (x, Z) G #6 x if,?. Let £' denote the isogeny ^4 3 — > A 3 given by 

(xi, x 2 , x 3 ) h-> (2xi + 2x 2 + 2x 3 , — 2xi + x 2 + x 3 , -3x 2 + 3x 3 ). 

Assume we are given an element (l,x, Z) of G m ,n x Zj 1 x Z% . We denote £(x, Z) = (x, Z). Choose 
x G #6,6,6 and Z G #66,6 sucn that [6](x, I) — (x, Z). One verifies that £ o £' = [6] and hence the 
element £'(x, Z) G #3.6,2 x #3°6 2 differs from (x,Z) by an element of Zi x Z 2 . This implies the 
above claim. 

In the sequel we will prove the commutativity of the diagram (|25[) for elements of the form 
(1, 2x, x, 3x, I 2 , Z, I 3 ). The proof for elements of the form 

(l,2x,x,-3x,Z 2 ,Z,Z~ 3 ) and (1, 2x, -2x, 0, Z 2 , r 2 , 1) 
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goes analogously and is left to the reader. We define 

t : G(K 6 ) -> G(K afi , 2 ), {a, x, I) ^ {a 6 ,2x, x, 3x, I 2 , 1, I 3 ) 

and set k = 6 3:6 , 2 o lo G^ 1 . Let G(K 6 )* = t^G^e^)* and G(£ 6 )* = Q 6 (G(K 6 )t). We define 
if3 : G(C) — > G(M.i j i ! i) and $3 : G(Ki) — > G^i^i) to be the restriction on the 3-rd factor of the 
morphism and $ introduced in the proof of Lemma 13.61 It is readily checked that the following 
diagram (dotted arrows ignored) is commutative 



G(£ 6 )« 



'la 



G(K 6 )i 



G{L) 



G(M 3 , 6 , 2 )*/K- 

: can,£ 

0i 





id X £Ti X (72 



x AT Mil x iff 1 j 



Here 776 and are defined as in [31 §5.3]. Note that the upper left square is commutative since 
06 and Oi are assumed to be 6-compatible. 

In order to show that the diagram ([25]) is commutative on the subset of elements of the form 
(1, 2x, x, 3a:, I , I, I 3 ) it suffices to prove that the following diagram commutes 



G(C 



6 Mi 



G(Ms, 6 , 2 )*/K 



can,£ 



G{C)- 

Consider the commutative diagram 



G(Mi,i,i). 



A 3 



A 3 



[6] 



A A 

where ia(x) = (0,0, a;). There exist isomorphisms 

(i : [6]*£ ^ C 36 and 7 : 1^1,1,1 ^ £. 

The existence of the isomorphism (3 is implied by the symmetry of C. Consider the isomorphism 
5 given by the composition 



[6]* 7 



t*M 3A 2 r«rM M|1 = (£ o t)*VW w = (t 3 o [6})*M 1)1A = [6}*i$M 1>hl ^ [6]*£ A £^ 

where a is as above. The isomorphism S induces a morphism 

can, t : G(M 3 , e ^) - G(£ 36 ), (or, V) -> (pa (a:), T p * (x) 5 ° r> o <5 _1 ) 

where p 2 A 3 A denotes the projection on the second factor. We claim that the following 
diagram is commutative 



G(£ 6 ) ^G(M 3)6 , 2 ) 



G(C 36 ) 



(26) 
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where e§ is defined as in [31 §5.3]. Let g = ((x,l),ip) £ G(£ 6 ) and h = 6 1 (g). By definition we 
have 

L(h)=$(H 2 (h),h,H 3 (h)) 

and hence 

= v(%(5),5,%(.9)) = ((2a;, a;, 3a;, Z 2 , /, /^p^WO O p^ ® P3%(V0)- 
The image of n(g) under the canonical morphism induced by S is given by 

(x, T*8 o t* (plmW <8> Pli> <8> Pa^WO) ° • 

Choose isomorphisms £>2 : [2]*£ £ 4 and p3 : [3]*£ ^> £ 9 . Consider the composed isomorphism 
J' given by 

T*M 3fi ,2 = T*( P IC 3 (g>p* 2 C 6 (g> P * 3 C 2 ) = (pi o t)*£ 3 <g> (pa o T )*C 6 ® (p 3 ° r)*£ 2 
= [2]*£ 3 ® £ 6 ® [3]*£ 2 " 2 ^f p3 £ 36 . 
The isomorphism (5' differs from 5 by a unit. Thus we have 

t*s o T*( P * 1 mW®pti>®ptv3(ip)) o <r x 

= T*5' o 7-*(p;»ft(^) ®p5^ ® o 

= T*5' o (fo o r)*r7 2 (^) ® (p 2 o r)*</> ® (ps ° r)*»fe(V0) ° 0J') -1 
= T*J' o ([2]*»»(V) V ® [3]*773 (*/>)) ° (J') -1 

= (r> 2 o [2]* % (v) o p- 1 ) ® v ® (r> 3 ° [3]*%W<) ° p^) 

= £2(-0) ® V 7 ® ea(V') = e6(V0- 



This proves our claim, i.e. the commutativity of diagram (|26j) . The isomorphism 7 induces a 
morphism 

can, i3 : G{M 1X1 ) -> G(£), (a;, h-> (p 3 (a;), 2^7 o i*V ° 7 _1 ) 
where p 3 : A 3 — > A denotes the projection on the 3rd factor. Consider the diagram 



G(A4 



can,£ 




can, [6] 



Here G(£ 36 )* denotes the centralizer of the lifted subgroup A[6] in G(£ 36 ). By the above discussion 
the left hand triangle is commutative. By the same reasoning as above it follows that the composed 
morphism 

G(£) G(Mi 4 ,i) ~ G(£) 

equals the identity. This implies that the canonical morphism induced by 7 is surjective. As a 
consequence the commutativity of diagram (|25[) is equivalent to the commutativity of the following 
diagram 



G(£ b ) 



6^8 



G(M 3 ,e,2)*/K 



(27) 



can,£ 



G{C) 



G(Mi,i,i). 
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Let 

J€G(£ 6 )« and k{ 9 ) = {x,^). 
By definition the image of n(g) under the canonical morphism induced by 5 is given by 

(p 2 (x),T; 2{x) 6or^oS- 1 ). 

Since t{p2{x)) = x it follows that 

T M*) S T > S ~ 1 = T k*) iP ° [ fi ]*7 ^ ° (/3 o [6]* 7 o t*^ 1 )- 1 

= T* P2{X) P o T; 2(x) [6]* 7 o T^^a- 1 o r> ° r*a o [6]*7 _1 o /T 1 

P2 (x)P° [6J I; 2(6i) 7ot T^a orV°rao[6j7 o (3 
= T P2{x)P ° [ 6 ]* T p 2 (6x)7 ° CCaT 1 ° V> ° a ) ° [6]*7~ 1 ° 

= r; 2(x) /3 o [6}*t; 2{6x)1 o o [e]^- 1 o /r 1 



where £*^/>' = T*a _1 o-0o a. Note that such an isomorphism f// exists since k(<7) £ G(A^3,6,2)*- We 
remark that the pair (£(x),ip'^ G G(A^i,i.i) is the image of k(c/) under the canonical morphism 
induced by a. Continuing the above calculation we get 

T U*) 5 ° T > ° S ~* = T M*)P ° [ 6 ]%* (6x) 7 ° T *^' ° t 6 ^" 1 ^ 

= r; 2( x)/3 ° [6]* (t; 2(6;c) 7 o ° 7- 1 ) ° r 1 

By definition the pair 

5' = (p 3 (^)),t; 3( ^ )) 7o 1 ^'o 7 - 1 ) 

is the image of (£(x),^>'J under the canonical morphism induced by 7. We conclude by the above 
equality, the commutativity of diagram (|26[) and the definition of rj e that g' = r] e (g). Thus we have 
shown that diagram ([77]) is commutative. As a consequence diagram (|25[) is commutative. This 
finishes the proof of the lemma. □ 

Assume that we have chosen G(ifi i i j i)- and G(-ftT3.6,2)-equivariant isomorphisms 

Ml, 1,1 : T3,*Mi,i,i ^ V(-Ki,i,i) and ^ 3i6i2 : ir 3 ,* Ms,6,2 ^ ^(#3,6,2) 

where 7r3 denotes the structure morphism of ^4 3 . The following lemma is a generalization of the 
Addition Formula which is stated in |17[ §3] . We use the intuitively simplified notation introduced 
in the proof of Lemma 13.81 



Corollary 3.9 There exists a X £ R* such that for all g £ V(K\\ t \) we have 



^g(€{x, y, z )), £0) y, z ) e #1,1,1 

, else 



where (x,y, z) £ K3 



6,2- 



Proof. By Lemma T3. 81 we can apply the Isogeny Theorem (see [TTl §l,Th.4] [3l §5.2,Th.5.4]) in 
order to obtain the formula given in the lemma. □ 

Assume that we have chosen G(-?Q)-equivariant isomorphisms 

Mi : tt*£' ^ G(Ki), i £ I, 
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where n denotes the structure morphism of A, and that we have rigidified the line bundle C This 
defines theta functions q C i G V(K~i) (see [HI §1] and [HI §5.1]). 

Let A : A — > A 3 the diagonal morphism. There exists a canonical isomorphism /? : A* 1.1,1 — ► £ 3 - 
The following theorem describes the morphism of O^-modules ip defined as the composition 

7r*£ (g) ir*£ ® 7r*£ ^? ^3^*^14,1 ^? 7r 3) * A* A*Ati,i,i = 7r*A*Mi,i,i 7r*£ 3 , 

where the left hand morphism is the Kunneth morphism, in terms of finite theta functions. 

Definition 3.10 For si, 82,83 G tt„£ and fi,f2,fs G V(Ki) such that /i( s i) — fi (i = 1,2,3) we 
set 

/l*/2*/3 = (Ml ® Ml ® Ml)( s l ® «2 ® S3). 

We define for x G K$ 

= {(j/,z) G # 6 ,2 I £(x,y,2) €#1,1,1}- 

Theorem 3.11 (3-multiplication formula) There exists a A G R* such that for all x G K3 
and f\, /2, /a G V^ifi) we /iawe 

(/l */a *f3)[x) = A /i(a;-2?/)/2(x + y-z)/3(a; + y + z)(7 £ 6(y)g £ 2(z). 

Proof. Consider the commutative diagram 

A (28) 




where i± : A — > A 3 is defined by a; 1— » (x,0, 0) and A is the diagonal morphism. Note that 
there exists an isomorphism 7 : 11^3.6,2 — ► £ 3 - By Proposition 13.71 there exists an isomorphism 
a : ^* Ali. 1,1 — > 7^3,6,2- Because of the commutativity of the diagram (j2"5|) the morphism ip defined 
above equals up to a unit the composed morphism 

7T»£ ® 7r»£ ® 7r»£ — ► fs^Mi^i -^-^ 7T3 ) *A*A*A / {i 1 i > i 

= 7T*A*A4l,l,l = 1T*i*£*Ml,l,l 7T»i*A^3 : 6,2 ^ 7r*£ 3 . 

Passing over from sections to finite theta functions we get a diagram 

V{K X ) ® V(Ki) ® V(Jfi) c ™ £ V(2f 3 ,6, 2 ) C ™' V(2f 3 ). (29) 

The left hand map is defined to be the canonical isomorphism mapping 

fx */2 */3 | -> /1/2/3 
where /j is the function on #1,1,1 defined by 

/i(xi,x 2 ,x 3 ) = fi(xi), i=l,2,3. 

The map £* is given by Corollarv l3.9l The right hand eval-map in diagram (|29|) corresponds to the 
map on sections which maps a section s% ® S2 ® S3 G 7r*.M3,6,2 to the section (s2)o(s 3 )osi where 
(•)o indicates the evaluation at zero by means of the chosen rigidification. The claim now follows 
by expressing (s2)o and (s 3 )o in terms of theta null values (see (TTJ §l,Cor.3]). □ 
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4 Explicit CM construction in characteristic 3 



In this section we apply Corollary 12.31 to the explicit CM construction of invariants of ordinary 
abelian surfaces by canonical lifting from characteristic 3. The CM algorithm has two main phases: 

• first (see Section |4~4|) . the multivariate Newton lifting of a given canonical theta null point 
based on the equations of Corollary |2.3l bv means of the algorithm of Lercier and Lubicz [TJl 
Th.2], 

• second (see Section 03]), the LLL reconstruction of the defining polynomials over Z for the 
ideal of relations between the canonically lifted moduli, following Gaudry et al. [§]. 

The existence of the lifting algorithm is a consequence of the following facts. The ordinary locus at 
3 of the moduli space of abelian varieties with symmetric 4-theta structure, which is constructed in 
[18j . is smooth. The space of pairs of ordinary abelian varieties with symmetric 4-theta structure 
admitting a compatible isogeny of degree 3 9 , where g is the dimension, forms an etale covering of 
the latter space. 

The lifting algorithm applies to a rationally parametrized moduli space X over Z g , and a 
complete intersection in X x X. We replace the rational parametrization with a local analytic 
parametrization. We describe the construction in detail in the application to the explicit moduli 
of abelian varieties of dimensions 1 and 2 described herein, but the approach applies in greater 
generality to any dimension. 



4.1 Complexity hypothesis 

We will denote by ¥ q a finite field of characteristic p > having q elements. Let Z q denote the 
ring of Witt vectors with values in ¥ q . There exists a canonical lift a <E Aut(Z g ) of the p-th power 
Frobcnius morphism of ¥ q . If a is an element of 1 q we denote by a its reduction modulo p in 
Fq. We say that we have computed an element x G Z g to precision m if we can write down a 
bit-string representing its class in the quotient ring 7L q lp m 7L q . In order to assess the complexity 
of our algorithms we use the computational model of a Random Access Machine [H] ■ We assume 
that the multiplication of two n-bit length integers takes 0(n M ) bit operations. One has \i = 1 + e 
(for n sufficiently large), [i — log 2 (3) and /i = 2 using the FFT multiplication algorithm, the 
Karatsuba algorithm and a naive multiplication method, respectively. Let x,y S r L q /p m 1 q . For 
the following we assume the sparse modulus representation which is explained in (4j pp.239]. Under 
this assumption one can compute the product xy to precision m by performing 0(m p log(q)' 1 ) bit 
operations. 



4.2 A lifting algorithm for moduli of elliptic curves 

We first describe a canonical lifting algorithm for theta null points of elliptic curves, hence take an 
abelian scheme E of relative dimension 1 over 1 q . Its theta null point (ao : a% : '■ a\) determines 
a Legendre model for E of the form 



y = x(x — l)(x — A), where A 



2aoa2 



In particular we make use of the maps of modular curves 

^i(6 4 ) — » -4i(e 4 [2]) — » X(2), 

where the first map is (ao : a\ : 02) 1— > (ao : a 2) is the restriction to the 2-torsion part of the theta 
structure, and X(2) is the full modular curve of level 2 with function field generated by A. 

We recall that the curve „4i(9 4 ) is determined by Riemann's equation ([7]) and the correspon- 
dence equation © determines a curve in the product ^1(64) x ./^(O^. Projecting this corre- 
spondence curve onto the 2-torsion part with coordinates (xq : X2) and (yo ■ J/2)) gives rise to an 
affine curve 

x 4 - 4x 3 y 3 + 6x 2 y 2 - Axy + y A = 0, (30) 
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by setting x = x 2 /xq & n d y = 1)2 1 Vq- This curve is singular of geometric genus 3, with singularities 

{(0,0), (1,1), (-1,-1), (<,-<)}, 

where i 2 = —1 in Z g . It is easily verified that all x in {00, 0, 1, — 1, i, i} determine degenerate, 
singular cubic curves. Moreover, the special fiber at 3 takes the form 

(x 3 -y)(x-y 3 )=0, 

whose singularities consist of all points (x,x CT ) for x in Fg. Outside of the image of the above 
degenerate points, the remaining Fg-rational points are supersingular. 

The remaining points correspond to theta null points of ordinary elliptic curves, for which 
it is easily verified that the conditions of Lercer-Lubicz [12) for an Artin-Schreier equation are 
satisfied. Hence their Newton algorithm applies to uniquely lift a solution to equation (j30|) with 
the constraint to y = x a . From a solution to this system, we set (eto : 02) = (1 : x) and determine 
01 by one Newton lifting step. This gives the following theorem. 

Theorem 4.1 There exists a deterministic algorithm which has as input the theta null point (a*) 
of an elliptic curve E over ¥ q and as output the theta null point (aj) of its canonical lift E to a 
given precision m > 1, with time complexity 

0(bg(m)d"m' 1 ) 

where d — log(g). 



4.3 A lifting algorithm for split abelian surfaces 



As in Section 12.1.11 we let A g (®4 [2]) denote the moduli space of 4-theta null points, projected on 
the coordinates which are parametrized by the 2-torsion subgroup. We recall that 

O00 a 22 — 0020-20 = 0, 

determines one component in A% (G4 [2]) of split abelian surfaces. We refer to Runge [23]) for a 
complex analytic description of this locus as a degenerate Humbert surface. 

The remaining components are obtained by the action of a geometric automorphism group 
acting on theta structures and preserving the moduli of abelian varieties. Explicitly this group is 
generated by the projective automorphism group generated by the matrices 



/ 1 1 ^ 
-110 
11 
\ 0-11/ 



/ 1 10^ 
-10 10 
10 1 
\ -10 1/ 



/ 1 \ / 1 \ 

1 i 

i ' i 

\ i / \ 1 / 



acting on „4 S (04[2]) = P 3 . These automorphism determine a transitive action on the 10 compo- 
nents of the Humbert surface. In particular, given a theta null point of a split abelian variety, by 
means of an automorphism (defined over an extension of degree at most 2), we may assume that 
it lies on the locus 000022 = 002020- 

We now recall that the locus 000022 = 002020 is the image of ^1(64 [2]) x Ai(&4 [2]) in „4 2 (©4[2]) 
by a Segre embedding 

((ao : a 2 ), (a : a' 2 )) 1 — > (a o : a 2 : 020 : 022) = (aoa : o a 2 : a 2 a' : a 2 a' 2 ). 

The canonical lift of this theta null point is obtained by means of the canonical lifting to algorithm 
applied to (aoo : 020) = (002 : 022) and to (aoo : 002) = (020 : 022). This yields the canonical lift of 
the theta null point with the same complexity as for elliptic curves. We summarize this result in 
the general theorem for abelian surfaces in the next section. 
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4.4 A lifting algorithm for moduli of abelian surfaces 

We use the notation introduced in Section 14.11 For the rest of this section let A be an abelian 
scheme of relative dimension 2 over Z g having ordinary reduction. Suppose A is the canonical lift 
of Af q . Let C be an ample symmetric line bundle of degree 1 on A and assume we are given a 
theta structure of type (Z/4Z) 2 for (A,£ 4 ). We denote the theta null point with respect to the 
latter theta structure by (oy) where € (Z/4Z) 2 . 

Theorem 4.2 There exists a deterministic algorithm which has as input the theta null point (fly) 
of A^ q and as output the theta null point (dy) of A to a given precision m > 1, with time complexity 

0(log(m)d'W) 

where d — log(q). 

Proof. The complexity result of Theorem 14.21 is an analytic version of (XSJ Th.2]. We explain 
below how our system of equations can be adapted to an analytic context from which the result 
will follow. 

By means of a geometric automorphism, we may assume that aoo is a unit and embed the 
corresponding open subscheme of A2 (64) in A 9 . We identify its image in A2 (O4 [2]) with A 3 . We 
denote the open analytic subspace of sections in A 9 (Z g ) = Z 9 by X , and suppose that a is a point 
of X. This determines a projection W : X — ► Z 3 , under which we denote a — ^>(a). 

In the following we let U C Z 3 be an analytic neighborhood of a, and we construct an analytic 
map $ : U — ► Z 3 , such that $(a) = 0. We first choose pairwise distinct polynomials 

from the equations (fit)]) of Corollary |2.31 and let S be the function X x X — » Z 3 given by 

O&jJ/) (fi(x,v),h(x ) y),f 3 (x ) y)). 

By the smoothness of the ordinary locus at the prime 3 of the moduli space of abelian surfaces 
with symmetric theta structure of type (Z/4Z) 2 we conclude that there exists an analytic local 
inverse II : U — > X of \I/ such that 11(a) = a where U C Z 3 is a neighborhood of a with respect to 
the 3-adic topology. Note that for an arbitrary choice of square roots we have 

Oqx = ^-(V&oo^oi + &10&11 + \/bo b Q1 - b w bn), a 2 \ = ^-(V&oo&oi + 610611 - y / b 0Q b 01 - 6i 6n), 

\ \ 

010 = 77(^600610 + b Q1 bn + V^oo^io - &oi&ii), 012 = tj(V&oo6io + boi&u - \/6oo6io - boi&u), 

^ J 

an = x (V&00611 + 601&10 + V&00611 - 601&10), a i3 = ^-(V&oo&ii + boibio - \/&oo&ii - 6 i6i ), 

where 

boo = 1, &01 = x/ A~ 1 ( a oo a 02 + 020022) , 

620 = V A~ 1 ( a oo02o + 002022), 622 = v /A- 1 (a 00 a22 + 002020), 

and where A = (ag + ag 2 + a| + a| 2 )/2. The above formulas can be deduced from Mumford's 
2-multiplication formula [17l §3]. We note that the zero set of bij and of 

&00&01 ± &10&11, booho ± 601611, 600611 ± 601610, 

lie over the components of the moduli of split abelian varieties. Applying the algorithm of the 
previous section to such points, we may thus assume that the map is unramified at (ay). 

Consider the subset Y C X x X which is defined by the equations of Corollary 12.31 Let 
Pi : Y C X x X — > X (i = 1, 2) be the map induced by the projection on the ith factor. The map 
Pi forms an etale covering. We can choose a local analytic section i\ : V — ► F of the projection 
Pi in a neighbourhood V of q such that ii(a) = {a, a"). Let S = p 2 o i x . Note that £(a) = a a . 
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By Serre-Tate theory the morphism S is analytic in a neighborhood of a. More precisely, this is a 
consequence of the representability of the local deformation space of an ordinary abelian variety 
over F g by a formal torus and the fact that the unique lift of the relative 3-Frobenius equals up 
to isomorphism the 3rd powering map on this torus (see [9] and |16j). 
We define <E> to be the composition 

A n 2 IdxS 3 _ q 

U — =-> U x U X x X > X x X -^4 T? q 

where A is the diagonal map and II 2 = II x IT. The equality $(a) = holds by Corollary 12. 31 By 
the above discussion, $ is analytic and is defined on the open disc U with center a and radius 
1. The fact that the radius equals 1 can be deduced from the interpretation of the points in the 
image of $ as moduli points of abelian varieties with 2-theta structure. 

In the following we verify that the assumptions of [321 Th.2] are satisfied. For an analytic 
function F we denote its first order derivative by Dp. We have = mod 3 for all x G U, 

because all points of U reduce to the same canonical theta null point satisfying the equations © 
and (fT0j) , and hence 13$ (a) = mod 3. We write D~_ x and D~, Y for the submatrices of Ds being 
the derivative of 5 with respect to the first and second factor of the product X x X. By the chain 
rule we conclude that 

= Z3$(a) = D Sx (U(a),n{a) a )D n {a) + D Ey (11(a), n(a) CT )L> E (11(a)) L> n (a) mod 3. (31) 

By general theory 9J the Frobenius lift acts on the Serre-Tate formal torus as the 3-rd powering 
map and hence D E (11(a)) = mod 3. We conclude by equation (|3Tj) that 

D Sx (n(a), U(a) a )D n (a) = mod 3. (32) 

Next we prove by contradiction that for a suitable choice of the triple (/i, /2, fs) (notation as 
above) we have 

det(D Hi ,(n(a),n(a)' T )Lin(a)) ^ mod 3. (33) 

We remark that in the lifting algorithm the choice of the triple (/i, fo, f%) has to be done depending 
on the initial data. Suppose condition (|33[) is not satisfied for any triple (fi, f2, fs)- Then by the 
Jacobi criterion we conclude that the moduli space of pairs of ordinary abelian surfaces with sym- 
metric 4-theta structure and compatible (3, 3)-isogeny is not smooth at the point (11(a), n(a) CT ). 
This contradicts the fact that the latter space forms an etale covering of the smooth space X. 
Clearly the equations (|3"2"|) and (f3"3"| imply the assumptions of [HI Th.2]. By the algorithm sug- 
gested there and the above discussion we can compute x £ U such that $(x) = mod 3 m for given 
precision m with complexity as stated in the theorem. 

In the following we explain why the output of the latter algorithm is indeed the theta null 
point of the canonical lift to given precision. We claim that for x £ U one has an equivalence 

x = a mod 3 m $(x) = mod 3 m . (34) 

It suffices to prove that $(x) = mod 3 m implies x = a mod 3 m since the converse is obvious. The 
proof is done by induction on m. Assume that equivalence (|34[) holds for some m > 1. Assume 
that <&(x) = mod 3 2m . By the induction hypothesis we have 8 = 3~ m (x — a) G 1? . Then by 
Taylor expansion of the analytic function $ at a we get 

= &(x) = *(a + 3 m 5) = *(a) + D${a)Z m 8 +... = D^,{a)'i m 5 mod 3 2m . (35) 

By equation (|35[) we conclude that 

= i?*(o)<S mod 3 m . (36) 
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We set 



Dx = D Ex (U(a),n(a a ))D n (a), 
Dy = D EY (U(a),U(a' 7 ))Dn{a). 

By (|3"Tj) the equation (|3"rJ)) is equivalent to 

5 = £>(<5) mod 3 m (37) 

where -D is the linear operator given by 

y>->- {D Y 1 D x y)' T 

Here we have used that the map £ already exists as an endomorphism of U which commutes with 
the application II. Note that by condition (f33f the matrix Dy is invertible. By condition (f32|) the 
entries of the matrix Dy X Dx are all divisible by 3. As a consequence we conclude from equation 
([37]) that 5 = mod 3 m . This proves our claim. 

In the following we will show how to compute the matrices Dx and Dy , since they are needed 
for the algorithm of Lercier and Lubicz [TJ] . By the above discussion, we can compute compatible 
branches of the local inverse II at a and a a such that n(a CT ) = Ii[a) a . From this it is straightforward 
to compute D Ex (11(a), n(a <T )) and Ds Y (n(a),II(a CT )). Next we explain how to compute Dn(a). 
Let A : Z® — > If be defined by 

x = (xij) i — > (Ai(x), . . . ,A 2 o(i)) 

where A.j are the Riemann relations ([5]), so that A(II(a)) = 0. By the chain rule we conclude that 

D A (n(o))23n(o) = 0. (38) 

Let 7r : l? q — > be the morphism such that 11(a) = (a, 7r(a)). Then Dn is the vertical join of the 
unit matrix of rank 3 and D^ where D T denotes the derivative of it. We write 

where D^ and D^ 1 have 3 and 6 columns, respectively. Note that by the smoothness of the space 

(2) 

X the rank of D y A ' at n(a) equals 6. There exists a matrix T G GL2o(Z 9 ) such that the matrix 

E = T-D^(U(a)) 

is in echelon form. It follows from equation (|38[) and the above discussion that 

E-Ar(a) = -T ■ D { 1 ] (U(a)) . 

From this it is straightforward to compute D^(a) inverting the unique invertible (6,6)-square 
sub-matrix of E. We remark that the above computation can be done modulo any given precision. 
This completes the proof of Theorem 14.21 □ 

We conclude this section by a practical remark. Our implementation uses a multivariate version 
of the algorithm of R. Harley (compare [28, §3.10]) for solving generalized Artin-Schreier equations 
instead of the the method suggested in [TJ] . 

4.5 LLL reconstruction 

From the theory of complex multiplication wc know that the invariants of canonical lifts are 
algebraic over Q. We briefly recall the method of Gaudry et al. [8] for LLL reconstruction of 
algebraic relations over Z. Let 7 be a p-adic integer in an extension of degree r over Z p , and let m 
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be the precision to which it is determined. We assume that the degree n of its minimal polynomial 
over Q is known, i.e. that there exists f(x) £ Z[x], with 

/(7) = «n7" + ... + oo = 0, 

where the a, £ Z are unknown. We determine a basis of the left kernel in Z n+r+1 of the vertical 
join of the matrix 

1 •■• 

7i,o 7i,i ••• 7l,(r-l) 

7n,0 7n,l ' ' ' 7n,(r-l) 

with p m times the r x r identity matrix, where 7^ are defined by 

7 1 = 7i,0 + 7i,l^l + • • • + 7£,( r _l)lUr-l) 

in terms of a Z p basis {1, W\, . . . , io r — 1} for Z g . The minimal polynomial fix) is determined by 
LLL as a short vector (do, . . . , a n , e%, . . . , e r ) in the kernel. 

The complexity of the LLL step depends on the values r, n, and m. The values of r and n 
can be recovered by a curve selection and analysis of the Galois theory of the class fields. The 
required precision m, determined by the size of the output, is less well-understood, and we express 
the complexity in terms of these three parameters. Using the L 2 variant of LLL by Nguyen and 
Stehle [20], the complexity estimate of [8] gives 0((n + r) 5 (n + r + m)m) in general, and in our 
case the special structure of the lattice gives a complexity of 0((n + r) A (n + r + m)m). 



5 Moduli equations and parametrizations 

In this section we give the equations which form a higher dimensional analogue of Riemann's 
quartic theta relation. Then we state the classical Thomae formulas in an algebraic context, 
relating the invariants of genus 2 curves to theta null points. Finally we apply the algorithm of 
Section [4] to the construction of CM invariants of abelian surfaces and genus 2 curves. 



5.1 The Thomae formulas for genus 2 

Let R be an unramified local ring of odd residue characteristic, and H a hyperelliptic curve over 
R given by an affine equation 

5 

V 2 = Y[{x - e^, 

i=i 

where the e, € R are pairwise distinct in the residue field. Let (J, ip) denote the Jacobian of H 
where tp denotes the canonical polarization. There exists a finite unramified extension S of R and 
an ample symmetric line bundle C of degree 1 on J5 which induces the polarization ipg. We assume 
that S is chosen such that there exists an 5-rational symmetric theta structure 8 of type (Z/4Z) 2 
for the pair (Js,C). Let ((%■), where £ (Z/4Z) 2 , denote the theta null point with respect to 
the latter theta structure. 

Theorem 5.1 (Thomae formulas) With the notation as above, one has 



a-oo — 1 oq2 



4 /( e i - e 2 )(e! - e 4 ) 

d20 — \ 7 77 r a 22 

V ( e i - e 3 )(ei - e s ) 



(ex 


- e 4 )(e 2 


- e 5 )(e 3 


- e 4 ) 


(ex 


- e 5 )(e 2 


- e 4 )(e 3 


- e 5 ) 


(ei 


- e 2 )(e 2 


- e 5 )(e 3 


-e 4 ) 


(ei 


- e 3 )(e 2 


- e 4 )(e 3 


- e 5 ) 



such that Qq 2 — (ei — e 3 )/(ei — e2)a\ Q a 2 



22 • 
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For a complex analytic proof of the Thomae formulas see [HI p. 120]. 

Conversely, let A be an abelian surface over S with ample symmetric line bundle C of degree 
1 on A. Assume we are given a symmetric theta structure of type (Z/4Z) 2 for the pair (A,£ 4 ), 
and let (fly) denote the theta null point with respect to the latter theta structure. We associate 
a curve to the theta null point in the following way. Let /* be a solution of the equation (possibly 
over an unramified extension) 

2 _ ( a 00 ~ a 02 + a 20 ~ a 22) , i _ r> 
f 1 ( 2 2 2 2 \ M + 1 - U, 

^ u 00 u 20 u 02 u 22/ 

and set 

V 022020 ' \a 22 / Vfl20- / 



Corollary 5.2 TVie curve 

V 2 = x(x -l)(x- Xi)(x - X 2 )(x - A 3 ) 
has as Jacobian the abelian surface A. 

Proof. Inverting Theorem 15. 1[ one verifies that the roots /x give rise to values (Ai, A 2 , A3) in the 

'ei - e 3 ei - e 4 ei - e 5 \ / e\ - e 3 ei - e 3 ei - e 3 ' 



v ei — e 2 ei — 62 ei — e2 / \ei — e2 ei — es ei — 64 / 
which determine curves isomorphic to the curve with affine equation y 2 — Hi=i( x — e «)- '— ' 

Unfortunately, the Rosenhain invariants (Ai,A 2 ,A3) of the above curve are not determined 
by the 2-torsion part (aoo : 002 : a 2 o : a 22 ) of the theta null point. Instead we must pass to a 
(2, 2)-isogenous curve to determine a genus 2 curve parametrized by this theta null point. 

Theorem 5.3 The curve 

V 2 = x{x - l)(x - Hx){x - /i 2 )(x - ^3), 



where 

Ml 

M2 
M3 



(a 00 + a 02 + a 20 + a 22 )(aooflo2 + 020^22) 
2(aoo«20 + ao2a22)(aoofl22 + ao2Ct2o) 

(qq — Aq 2 + a 20 — Q 22 )(aooa 02 + a 20 a 22 ) 
2(aooa 22 + ao 2 a 2 o)(aooa 2 o — ^02322) 



{al + al 2 + a 2 2() + al 2 ){a 2 
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(aooao2 + a2oa22)(aooao2 — a 2 oa 22 ) 
has Jacobian (2,2)-isogenous of the abelian surface A. 

Proof. The Richelot isogeny determined by the polynomials 

Gi = x, G 2 = (x - l)(x - Ai), G 3 = (x - A 2 )(ar - A 3 ), 

determines a curve isomorphic to the above curve. □ 

Thus we obtain a rational map from the space „4 2 (G>4[2]), determined by the 2-torsion part 
(aoo : ao2 : a 2 o : a 22 ) of a theta null point, to the moduli space .M 2 (2) of genus 2 curves with 
level-2 structure, determined by the Rosenhain invariants (fii, fj, 2 , ^3). The latter point specifies an 
ordered six-tuple of Weierstrass points over (00, 0, 1, fj,%, /x 2 , /X3). We note that this map is defined 
on the open subspace outside of the components defining split abelian surfaces. 
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5.2 Examples of canonical lifts 

In this section we give examples of canonical lifts of 3-adic theta null points. The examples were 
computed using implementations of our algorithms in the computer algebra system Magma [13 . 
Generic algorithms and databases of CM invariants for genus 2 curves can be found from the 
authors' web pages (see [5]). 

Example 1. Consider the genus 2 hyperelliptic curve H over F 3 defined by the equation 

y 2 = x 5 + x 3 + x + 1. 

Let J denote the Jacobian of H . The abelian surface J is ordinary. Over an extension of degree 40 
there exists a theta structure of type (Z/4Z) 2 for (J, £ 4 ) where C is the line bundle corresponding 
to the canonical polarization. Let (fly) denote the theta null point of (J, £ 4 ) with respect to the 
latter theta structure. We can assume that aoo = 1- Note that the coordinates a 02 , &20 and 0,22 are 
defined over an extension of degree 10. We set F 3 io = F 3 [z] where z 10 + 2z 6 + 2z 5 + 2z 4 + z + 2 = 0. 
We choose 

= _ r 9089 - _ .18300 „ 1 - _ 8601 
^02 — Z , O20 — z an Q a 22 — z 

By the algorithm described in Section|4]we lift the triple ((Z02, 020, 0-22) to the unramified extension 
of Z3 of degree 10. We denote the lifted coordinates by 002, »20 an d 0-22- Let Py be the minimal 
polynomial of a,j over Q. A search for algebraic relations using the LLL-algorithm yields 

P 02 = x sa - 69a; 76 + 4911a; 72 + 20749a; 68 + 299094a: 64 - 20 22 1 7a; 60 
+ 1093161a; 56 - 7393871a; 52 + 1195 1 456a; 48 + 7541235a; 44 
-26349059a; 40 + 754 1 23 5a; 36 + 1195 1 456a: 32 - 73 9 3 871a; 28 
+ 1093161a; 24 - 20 2 2 1 7a; 20 + 29 9 94a; 16 + 20749a; 12 + 4911a; 8 
-69a; 4 + 1, 

P20 = x 20 - 5a; 19 + 23a; 18 - 53a; 17 + 112a; 16 - 203a; 15 + 279a; 14 - 345x 13 
+360a; 12 - 333a; 11 + 329a; 10 - 333a; 9 + 360a; 8 - 345a; 7 + 279a; 6 
-203a; 5 + 112a; 4 - 53a; 3 + 23a; 2 - 5a; + 1, 

P22 = x so + 5a; 76 + 184a; 72 + 2254a; 68 + 4470a; 64 + 160109a; 60 + 768428a; 56 
+421488a; 52 + 36 97 1 535a; 48 - 75225290a; 44 + 44767882a; 40 
-43287046a; 36 + 86078086a; 32 - 75 5 6 8 5 56a; 28 + 3 1 8 7 3 7 6 2a; 24 
-7293064a; 20 + 989181a; 16 - 32859a; 12 + 4318a; 8 + 44a; 4 + 1. 



We conclude that the field kg generated by the coordinates 002, 020 an d 022 is a Galois extension 
of Q having degree 160. Note that fco contains Q(i). 

The characteristic polynomial of the absolute Frobenius endomorphism of J equals 

a; 4 + 3a; 3 + 5x 2 + x + 9. 

Let K = EndF 3 (J) (g> Q. The field K is a normal CM field of dimension 4 whose Galois group 
equals Z/4Z. The class number of K equals 1. The maximal totally real subfield of K is given 
by Q(a/T3)- Note that K equals its own reflex field K* . The compositum k$K* forms an abelian 
extension of K* having conductor 8 and Galois group (Z/2Z) 2 x Z/10Z. Note that the polynomial 
P20 generates the ray class field of K* modulo 2. 

We remark that the curve H with defining equation 

y 2 = 52a; 5 - 156a; 4 + 208a; 3 - 156a; 2 + 64a; - 11 

is a canonical lift of H in the sense that H reduces to the curve H and the Jacobian of H 
is isomorphic to the canonical lift of J. For a list of curves of genus 2 over Q having complex 
multiplication we refer to [2Tj . 
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Example 2. Let H be the hyperelliptic curve over F 3 e = Fa[z] where z 3 — z + 1 = 0, defined by 
the affine equation 

y 2 = x(x — l)(x — z)[x — z s )(x — z 2 ). 

We may associate a theta null point to H over an extension and apply our algorithm to de- 
termine the canonical lifted Rosenhain invariants from the lift of the theta null point. By LLL 
reconstruction, the Igusa invariants 

jf . J|J4 . J2J& 
Jl = -7-, J2 = — ; — , JA = —f — , 
J 10 J 10 J 10 

of the canonically lifted curve H satisfy the minimal polynomials 

1167579244112528766379604000052855618647029683ji 

- 15257677849803613955571236222133142793627666039890131548110848ji 

+ 1196131879277094213213237826625656616667290986216439120696238769598103552JJ 1 

- 1502690183964538566290599551441994054504503089078463931648679137089316924162048;/? 
+9494960051498045134856366244512386171442968847268749046183153757319495998347673600000ji 

- 9489242494532768198621993753759532669268063460725268563272920396343489385558179840000000000ji 
+3154745183558232433309182902721654489400212652045192101874580090073682713333727232000000000000000 

31524639591038276692249308001427101703469801441 j| 

- 16745634807723620828207592940844036495138204085628428409110528i2 

- 12265164179615739710029144012197055859859725320474999182497036825001984j^ 
+352141775319032803460285640460530428476805227032807841788375367068285927424j| 

- 115886117015701373170818041387627276397709556079989081954770457714548434534400000j| 
+6241088101000204747012315559761320786612924621590641411279130896395801722880000000000J2 

- 119116948667007461483450210289814155018636097544277843858343319784591982592000000000000000 
22981462261866903708649745533040357141829485250489^ 

- 38333133385822330975872342595626396239705000243787196311246336j| 

- 13445890564402694049486311582599736771794395285600128293985309687808^4 

- 25587083283087299157726904789352095023627415391850896175427316095123456j| 

- 20922653078662308982945894934868322119306736601817862795598824527101952000j4 

- 6125981423009705673176896782997851830442900916324351082547267950870528000000j 4 

- 1226005575547426252457067048464156648937773482166774996185845610840064000000000 

We note that neither of these Jacobians has good ordinary reduction at 2, thus extend the realm 
of applicability of the 2-adic CM method [S] . 

6 Conclusion and perspectives 

This work generalizes prior higher dimensional 2-adic canonical lifting algorithms to a 3-adic 
setting. Firstly, in Theorem 12.11 we introduce the moduli equations which provide the higher 
dimensional analogues of the modular curve Xq(3). Secondly, we describe a general multivariate 
Hensel lifting algorithm in an analytic framework (removing the need for a rational parametrization 
of a variety). As an application our work gives an explicit CM construction for moduli of genus 
2 curves (and their Jacobian surfaces), yielding a 3-adic alternative to the 2-adic construction of 
Gaudry et al. [S], and extending the domain of applicability to additional quartic CM fields. We 
expect that our method extends to primes p > 3, for which the primary ingredient will be an 
analogue of our Theorem 12. 11 With an increasing complexity for the resulting schemes, as both p 
and the dimension grow, we expect our approach through analytic parametrizations will become 
essential. 
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